提出MUTE方法,实现自进化智能体网络中可靠的数据删除。
When Unlearning Fails: Reliable Data Deletion under Post-Training in Agent Networks

- 通过轻量级服务器日志估算下游影响,识别需清除的数据残留。
- 在物理边缘设备上实验,相比全重训减少大量通信开销,泄露率低。
- 适合需要持续学习且重视数据合规性的联邦智能体系统使用。
自进化联邦智能体网络在部署后通过收集新轨迹并反馈至后续训练轮次,形成闭环,使遗忘比一次性模型修复更困难。当数据所有者请求删除时,目标数据可能已影响后续保留的轨迹,导致重训或模型侧遗忘仍残留影响回传。我们发现该影响残余会随遗忘型保留数据增多而增强,并可从部署、采集和聚合记录中追踪。为此,提出MUTE方法:基于轻量级服务器日志估计下游影响,通过忘却-保留更新消除当前残留,对高影响保留轨迹进行隔离或降权,并审计后续行为以在上行带宽预算内调度额外擦除。在LIBERO数据集上,采用两种视觉-语言-动作骨干网络,三种删除粒度,以及基于Jetson的物理边缘测试平台的实验表明,MUTE在保持任务性能的同时显著降低行为泄漏与影响再生,通信开销远低于完整重训。
原文摘要 · Abstract (English)
Self-improving federated agent networks keep training after deployment by collecting new trajectories with the current policy and feeding them back into later rounds. This closed loop makes unlearning harder than a one-time model repair. When a data owner requests deletion, the target data may have already shaped later retained trajectories, so retraining or model-side unlearning can leave an influence echo that returns as the network continues to operate. We show that this echo survives retained-data retraining, grows with the amount of forget-shaped retained data, and can be traced from deployment, collection, and aggregation records. To address this problem, we propose MUTE, a Muting Unlearned Trajectories' Echoes method for reliable deletion in self-improving federated agent networks. MUTE estimates downstream influence from a lightweight server ledger, removes the current residue through a forget-retain update, contains high-influence retained trajectories through quarantine or down-weighting, and audits later behavior to schedule additional erasure under an uplink budget. Experiments on LIBERO with two vision-language-action backbones, three deletion granularities, and a physical Jetson-based edge testbed show that MUTE keeps behavioral leakage and influence regeneration low while preserving task utility and using much less communication than full retraining.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。